Terminal and server for applying security policy, and method of controlling the same

Abstract

A method of operating a terminal using Mobile Device Management (MDM) solution includes: installing an application, requesting for registration by a license key received from an Enterprise License Management (ELM) server, receiving a Right Object (R/O) that corresponds to the license key and comprises a permission list, setting at least one permission based on the permission list comprised in the received R/O, and performing the set permission. A terminal using MDM comprises an MDM application configured to control an installed application to acquire a required permission, a ELM agent configured to request for registration by a license key from an ELM server, and receive a R/O that corresponds to the license key and comprises a permission list, and an ELM permission enforcer configured to set at least one permission based on the permission list comprised in the received R/O.

What is claimed is: 
     
       1. A method of operating a terminal by using a Mobile Device Management (MDM) solution, the method comprising:
 installing an application; 
 receiving a license key and a security policy that is established in an MDM server from the MDM server that is configured to receive the license key from an enterprise license management (ELM) server; 
 setting at least one permission of the installed application based on the security policy; 
 requesting for registration of the terminal by the license key to the ELM server; 
 receiving a Right Object (R/O) that corresponds to the license key and comprises a permission list from the ELM server; 
 resetting the at least one permission of the installed application based on the permission list comprised in the received R/O; and 
 performing the at least one permission. 
 
     
     
       2. The method of  claim 1 , wherein the license key comprises at least one of authentication, identification, or information on permission that the MDM server is configured to approve or restrict. 
     
     
       3. The method of  claim 1 , further comprising:
 paging an MDM Application Programming Interface (API) based on the set permission. 
 
     
     
       4. The method of  claim 1 , further comprising:
 receiving, by the ELM server, a request for transmission of the license key for an MDM construction from the MDM server providing the MDM solution;
 generating, by the ELM server, the license key in response to the request, and transmitting the generated license key to the MDM server for the MDM construction; 
 receiving, by the ELM server, a request for registration of the terminal using the MDM solution by the license key from the terminal; and 
 transmitting, by the ELM server, the R/O corresponding to the license key to the terminal when the license key received from the terminal is valid, the R/O comprising the permission list that the terminal is to page. 
 
 
     
     
       5. The method of  claim 4 , wherein the license key comprises at least one of authentication, identification, or information on permission that the MDM server approves or restricts. 
     
     
       6. The method of  claim 1 , further comprising:
 embedding, by the MDM server, the license key received from the ELM server into the MDM server that provides the MDM solution; 
 establishing and storing, by the MDM server, a security policy of the MDM solution provided by the MDM server; and 
 transmitting, by the MDM server, the license key and the security policy to the terminal using the MDM solution. 
 
     
     
       7. The method of  claim 6 , wherein the license key comprises at least one of authentication, identification, or information on permission that the MDM server approves or restricts. 
     
     
       8. A terminal using a Mobile Device Management (MDM) solution, comprising:
 a communication unit; and 
 a controller configured to:
 install an application; 
 
 receive a license key and a security policy that is established in an MDM server from the MDM server that is configured to receive the license key from an enterprise license management (ELM) server through the communication unit;
 set at least one permission of the installed application based on the security policy; 
 request registration of the terminal by the license key to ELM server through the communication unit; 
 receive a Right Object (R/O) that corresponds to the license key and comprises a permission list from the ELM server through the communication unit; and 
 
 reset the at least one permission of the installed application based on the permission list comprised in the received R/O. 
 
     
     
       9. The terminal of  claim 8 , wherein the license key comprises at least one of authentication, identification, or information on permission that the MDM server approves or restricts. 
     
     
       10. The terminal of  claim 8 , wherein the controller is configured to page an MDM Application Programming Interface (API) based on the set permission. 
     
     
       11. A terminal using a Mobile Device Management (MDM) solution, comprising:
 an MDM application configured to receive a license key and a security policy that is established in an MDM server from the MDM server that is configured to receive the license key from an enterprise license management (ELM) server and set at least one permission of an application based on the security policy; 
 an Enterprise License Management (ELM) agent configured to request for registration of the terminal by the license key to the ELM server, and receive a Right Object (R/O) that corresponds to the license key and comprises a permission list from the ELM server; and 
 an ELM permission enforcer configured to reset the at least one permission of the application based on the permission list comprised in the received R/O. 
 
     
     
       12. The terminal of  claim 11 , wherein the license key comprises at least one of authentication, identification, or information on permission that the MDM server approves or restricts. 
     
     
       13. The terminal of  claim 11 , wherein the MDM application is configured to page an MDM Application Programming Interface (API) based on the set permission. 
     
     
       14. The terminal of  claim 11 , further comprises:
 an ELM API logger configured to record a log of an API including terminal pages.